IBM Aspera Faspex
Moderate fix1 remedy
cpe:2.3:a:ibm:aspera_faspex:*:*:*:*:*:*:*
Moderate fix1 remedy
- >= 5.0.0, <= 5.0.14.1
IBM Aspera Faspex Sensitive Information Enumeration Vulnerability
Vulnerability
Patched
A vulnerability in IBM Aspera Faspex versions 5.0.0 through 5.0.14.1 allows authenticated users to enumerate sensitive information by exploiting package identifier enumeration. This could lead to the exposure of confidential data.
Impact
Exploitation of this vulnerability could result in the unauthorized enumeration of sensitive information, potentially leading to data exposure.
Remediation
Users are advised to upgrade to IBM Aspera Faspex version 5.0.14.2, available through the IBM Support Fix Central.
Added: Dec 26, 2025, 3:22 PM
Updated: Dec 26, 2025, 3:22 PM
Vulnerability Rating
Custom Algorithm
spread
1.9impact
2.5exploitability
4.8remediation
7.7relevance
1.7threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.